In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts… (CVE-2026-80953)
A vulnerability in the Linux kernel's i3c master adi driver was resolved by initializing a lock before enabling interrupts. The issue involved the adi_i3c_master_probe() function requesting an IRQ and unmasking an interrupt before the controller's internal state and transfer queue lock were initialized. This could cause an interrupt handler to acquire an uninitialized lock, leading to potential kernel instability. The problem was identified through static analysis and confirmed with a proof of concept. The fix involves initializing the transfer queue and IBI state before requesting and unmasking the IRQ.
AI Analysis
Technical Summary
The Linux kernel's i3c master adi driver had a race condition where the adi_i3c_master_probe() function requested an IRQ and unmasked the REG_IRQ_PENDING_CMDR interrupt before initializing the controller's IBI state, transfer queue list, and transfer queue lock. This allowed a pending CMDR interrupt to invoke adi_i3c_master_irq() and attempt to acquire the transfer queue lock before it was initialized, causing lockdep warnings and potential kernel lock issues. The vulnerability was detected by static analysis and verified with a proof of concept. The remediation was to initialize the transfer queue and IBI state before requesting and unmasking the IRQ.
Potential Impact
If exploited, this vulnerability could cause kernel lock inconsistencies or instability due to an interrupt handler acquiring an uninitialized lock. This may lead to kernel warnings or potential deadlocks affecting system stability. There is no indication of privilege escalation or data corruption from the provided information.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source by initializing the transfer queue and IBI state before requesting and unmasking the IRQ in adi_i3c_master_probe(). Users should update to the fixed kernel version once available. No additional mitigation steps are indicated.
In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabling interrupts… (CVE-2026-80953)
Description
A vulnerability in the Linux kernel's i3c master adi driver was resolved by initializing a lock before enabling interrupts. The issue involved the adi_i3c_master_probe() function requesting an IRQ and unmasking an interrupt before the controller's internal state and transfer queue lock were initialized. This could cause an interrupt handler to acquire an uninitialized lock, leading to potential kernel instability. The problem was identified through static analysis and confirmed with a proof of concept. The fix involves initializing the transfer queue and IBI state before requesting and unmasking the IRQ.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's i3c master adi driver had a race condition where the adi_i3c_master_probe() function requested an IRQ and unmasked the REG_IRQ_PENDING_CMDR interrupt before initializing the controller's IBI state, transfer queue list, and transfer queue lock. This allowed a pending CMDR interrupt to invoke adi_i3c_master_irq() and attempt to acquire the transfer queue lock before it was initialized, causing lockdep warnings and potential kernel lock issues. The vulnerability was detected by static analysis and verified with a proof of concept. The remediation was to initialize the transfer queue and IBI state before requesting and unmasking the IRQ.
Potential Impact
If exploited, this vulnerability could cause kernel lock inconsistencies or instability due to an interrupt handler acquiring an uninitialized lock. This may lead to kernel warnings or potential deadlocks affecting system stability. There is no indication of privilege escalation or data corruption from the provided information.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source by initializing the transfer queue and IBI state before requesting and unmasking the IRQ in adi_i3c_master_probe(). Users should update to the fixed kernel version once available. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8qpp-p36x-27xr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-80953"]
Threat ID: 6aa4a02e55bf5e2cf5a86b6f
Added to database: 09/12/2026, 00:43:26 UTC
Last enriched: 09/12/2026, 01:25:12 UTC
Last updated: 09/12/2026, 02:21:39 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.